➖ Remove roave/security-advisories

[retlehs]

See https://blog.packagist.com/composer-2-9/

Composer now automatically blocks updates to packages with known security advisories.

Note that if you are currently using roave/security-advisories to block packages with known vulnerabilities, this feature replaces it fully and you can remove the dependency on this package.